JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 159.89.239.6

159.89.239.6 was found in our database!

This IP was reported 262 times. Confidence of Abuse is 42%: ?

42%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇺🇸 United States of America
City	North Bergen, New Jersey

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 159.89.239.6

Whois 159.89.239.6

IP Abuse Reports for 159.89.239.6:

This IP address has been reported a total of 262 times from 164 distinct sources. 159.89.239.6 was first reported on December 26th 2024, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇷🇺 victoryur	2026-06-09 00:05:22 (1 week ago)	Reported by Fail2Ban on 24.finkont.ru (sshd)	Brute-Force
🇧🇷 ICS Labs	2026-05-18 21:03:59 (1 month ago)	ICS Labs identified 159.89.239.6 as a malicious indicator from threat intelligence.	Hacking
🇫🇷 masterguru	2026-05-10 14:35:17 (1 month ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 159.89.239.6 (US/United States/-): 1 ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 159.89.239.6 (US/United States/-): 1 in the last 3600 secs (0-197) show less	Hacking
🇨🇳 ThreatBook.io	2026-04-27 23:42:02 (1 month ago)	ThreatBook Intelligence: Scanner,Spam more details on https://threatbook.io/ip/159.89.239.6	SSH
🇷🇺 victoryur	2026-04-27 00:01:58 (1 month ago)	Reported by Fail2Ban on 24.finkont.ru (sshd)	Brute-Force
🇩🇪 Sayrix	2026-04-26 15:12:12 (1 month ago)	Apr 26 15:12:00 fra-1 sshd[278083]: Failed password for root from 159.89.239.6 port 39312 ssh2 Apr 2 ... show more Apr 26 15:12:00 fra-1 sshd[278083]: Failed password for root from 159.89.239.6 port 39312 ssh2 Apr 26 15:12:03 fra-1 sshd[278085]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.239.6 user=root Apr 26 15:12:06 fra-1 sshd[278085]: Failed password for root from 159.89.239.6 port 39314 ssh2 Apr 26 15:12:09 fra-1 sshd[278087]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.239.6 user=root Apr 26 15:12:11 fra-1 sshd[278087]: Failed password for root from 159.89.239.6 port 39330 ssh2 ... show less	Brute-Force SSH
🇩🇪 Portuseco Biling	2026-04-26 14:58:14 (1 month ago)	--Realtoxmedia-F2B blocked SSH BF--	Brute-Force SSH
🇳🇱 Tazit	2026-04-26 14:29:16 (1 month ago)	2026-04-26T16:29:13.717513+02:00 mail-tazit sshd[1591206]: pam_unix(sshd:auth): authentication failu ... show more 2026-04-26T16:29:13.717513+02:00 mail-tazit sshd[1591206]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.239.6 user=root 2026-04-26T16:29:15.524230+02:00 mail-tazit sshd[1591206]: Failed password for root from 159.89.239.6 port 45932 ssh2 ... show less	Brute-Force SSH
🇺🇸 sh97	2026-04-26 13:18:15 (1 month ago)	nws.sh: SSH Brute Force from 159.89.239.6 at 2026-04-26 18:48:15 IST	Brute-Force SSH
🇩🇪 ghostwarriors	2026-04-26 08:50:21 (1 month ago)	Unauthorized connection attempt detected, SSH Brute-Force	Brute-Force Port Scan SSH
🇵🇱 Wepted	2026-04-26 07:25:25 (1 month ago)	2026-04-26T09:25:23.697226+02:00 axisverse sshd-session[3355063]: Invalid user user from 159.89.239. ... show more 2026-04-26T09:25:23.697226+02:00 axisverse sshd-session[3355063]: Invalid user user from 159.89.239.6 port 45640 2026-04-26T09:25:24.432804+02:00 axisverse sshd-session[3355078]: Invalid user user from 159.89.239.6 port 45652 2026-04-26T09:25:25.190400+02:00 axisverse sshd-session[3355094]: Invalid user user from 159.89.239.6 port 45660 ... show less	Brute-Force SSH
🇺🇸 Silly Development	2026-04-26 06:05:53 (1 month ago)	2026-04-26T06:05:49.153819+00:00 kansas sshd[2007090]: Failed password for root from 159.89.239.6 po ... show more 2026-04-26T06:05:49.153819+00:00 kansas sshd[2007090]: Failed password for root from 159.89.239.6 port 45504 ssh2 2026-04-26T06:05:50.361511+00:00 kansas sshd[2007092]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.239.6 user=root 2026-04-26T06:05:52.486787+00:00 kansas sshd[2007092]: Failed password for root from 159.89.239.6 port 45508 ssh2 ... show less	Brute-Force SSH
🇩🇪 ipcop.net	2026-04-26 05:35:46 (1 month ago)	Malicious activity detected from 159.89.239.6.	Brute-Force
🇰🇷 Woodie	2026-04-26 04:34:12 (1 month ago)	2026-04-26T00:34:01.768161-04:00 debian sshd[2344513]: Failed password for root from 159.89.239.6 po ... show more 2026-04-26T00:34:01.768161-04:00 debian sshd[2344513]: Failed password for root from 159.89.239.6 port 35636 ssh2 2026-04-26T00:34:06.352262-04:00 debian sshd[2344599]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.239.6 user=root 2026-04-26T00:34:08.207571-04:00 debian sshd[2344599]: Failed password for root from 159.89.239.6 port 35238 ssh2 2026-04-26T00:34:09.850001-04:00 debian sshd[2344634]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.239.6 user=root 2026-04-26T00:34:12.115891-04:00 debian sshd[2344634]: Failed password for root from 159.89.239.6 port 35244 ssh2 ... show less	Brute-Force SSH
🇩🇪 Veslys	2026-04-25 23:58:24 (1 month ago)	Apr 25 23:58:21 Veslys sshd[3945424]: Failed password for root from 159.89.239.6 port 60232 ssh2 Apr ... show more Apr 25 23:58:21 Veslys sshd[3945424]: Failed password for root from 159.89.239.6 port 60232 ssh2 Apr 25 23:58:21 Veslys sshd[3945961]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.239.6 user=root Apr 25 23:58:23 Veslys sshd[3945961]: Failed password for root from 159.89.239.6 port 38198 ssh2 ... show less	Brute-Force SSH

Showing 1 to 15 of 262 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.180.246.210

🇮🇩 163.7.8.79

🇨🇳 121.29.149.197

🇮🇩 114.10.47.235

🇷🇺 81.177.48.219

🇨🇳 60.166.82.140

🇮🇳 49.205.150.30

🇲🇽 45.174.76.5

🇸🇬 43.153.207.127

🇺🇸 162.216.150.64

🇨🇦 159.89.124.112

🇧🇯 154.127.42.52

🇭🇰 103.229.126.95

🇧🇩 103.179.198.19

🇮🇳 103.25.47.94

🇨🇦 85.217.149.43

🇱🇹 81.30.98.144

🇧🇬 79.124.60.146

🇺🇸 47.254.76.66

🇳🇱 45.198.224.5